$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bda667a6-1043-3174-877f-93c65b32b582.roa File: bda667a6-1043-3174-877f-93c65b32b582.roa (raw, json) Hash identifier: knnFTgWxcWYB6V5Qtrgc2Io8MszNRtipLRIKu4t+lqc= Subject key identifier: 1A:AE:21:C0:52:21:EB:84:76:2C:56:94:DF:49:BD:B6:9C:4E:81:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4315DB824FAF65869BFCB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bda667a6-1043-3174-877f-93c65b32b582.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 174.169.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:5d:b8:24:fa:f6:58:69:bf:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=d462d43c-e34e-4312-bc1e-270b8244f108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:da:02:4e:6a:aa:e0:86:aa:7a:2e:3f:dd: c5:19:22:b7:fa:ee:57:2b:4a:54:dc:ea:55:72:54: 09:2f:15:96:b3:15:88:03:f0:5d:48:02:90:87:cb: b2:ea:14:76:d3:f3:9c:71:1b:ce:a2:8b:48:30:b9: 63:d6:3d:64:ee:e8:b8:32:a4:8d:41:9a:c4:9a:5c: 77:32:53:41:e6:bf:ca:23:d5:97:41:05:ec:a7:1e: d4:e0:8f:d1:02:af:af:d9:df:ff:b9:54:00:a8:86: 38:69:28:41:9d:80:7f:00:20:a4:e4:06:98:b4:f6: 34:1b:24:93:fd:30:b7:ed:10:d6:65:37:cc:6c:13: 9a:91:73:2d:5b:ad:58:82:9e:73:85:71:63:8c:c1: 75:17:46:38:91:77:bd:c3:6d:dc:16:f0:97:05:0f: 6f:f7:b6:c8:35:34:8a:54:7c:78:e7:b7:99:6f:52: ba:95:9f:5d:f5:7f:bc:2a:0a:49:9e:79:20:28:a6: c6:ec:b4:76:79:ef:a3:d2:22:84:22:b1:8f:9c:45: d5:45:8d:2a:62:38:b9:ea:6e:0f:36:90:c9:da:13: 7c:0b:1c:72:86:aa:d6:a9:71:84:a6:0f:8c:90:47: bd:42:97:1d:9c:0e:32:ec:cd:bc:47:b6:ff:71:98: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AE:21:C0:52:21:EB:84:76:2C:56:94:DF:49:BD:B6:9C:4E:81:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bda667a6-1043-3174-877f-93c65b32b582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.169.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4c:06:8c:74:7a:e7:e7:d3:35:9e:ac:7e:cf:d4:e0:31:85: f6:0a:28:9f:77:35:c3:ac:2d:e0:c7:fe:5f:c6:76:48:02:56: 8e:9b:f1:06:ed:d2:c4:8a:9e:72:9b:14:6d:57:02:0f:40:5a: b3:6b:07:4c:c7:aa:79:42:3d:ff:71:c9:37:32:8f:80:83:22: 07:b4:f0:3d:10:7d:c7:7b:f0:43:92:21:8f:d4:b9:b5:27:6d: 9e:0c:13:dd:32:c6:80:9d:65:fa:c1:33:87:4f:14:67:2e:a0: 63:fd:c9:88:c6:b1:6e:7f:d2:b7:b3:ea:40:12:97:48:48:39: 88:ca:b8:74:a6:04:1d:20:66:dd:bc:d4:3e:6a:9a:ee:bb:8d: 94:e1:2d:58:38:3b:79:98:0c:67:5b:72:a9:b4:03:37:30:dd: d7:ef:91:24:1b:bd:ec:5d:0e:64:8a:97:5e:ac:0d:44:7a:94: 93:69:81:e2:67:25:46:eb:03:4a:54:f8:4d:8d:67:11:05:6f: 42:c2:e3:f6:02:9f:14:9e:3a:25:52:34:05:c2:2d:63:eb:63: 76:47:0e:30:e9:46:df:25:b2:73:a5:83:23:82:ab:ce:ef:67: e2:1f:89:12:66:b0:66:e4:8c:22:e2:da:c1:27:2a:33:4a:94: 92:d2:c1:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMV24JPr2WGm/y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDQ2MmQ0M2MtZTM0ZS00MzEyLWJjMWUtMjcwYjgyNDRmMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt7aAk5qquCGqnouP93FGSK3+u5XK0pU3OpV clQJLxWWsxWIA/BdSAKQh8uy6hR20/OccRvOootIMLlj1j1k7ui4MqSNQZrEmlx3 MlNB5r/KI9WXQQXspx7U4I/RAq+v2d//uVQAqIY4aShBnYB/ACCk5AaYtPY0GyST /TC37RDWZTfMbBOakXMtW61Ygp5zhXFjjMF1F0Y4kXe9w23cFvCXBQ9v97bINTSK VHx457eZb1K6lZ9d9X+8KgpJnnkgKKbG7LR2ee+j0iKEIrGPnEXVRY0qYji56m4P NpDJ2hN8CxxyhqrWqXGEpg+MkEe9QpcdnA4y7M28R7b/cZhzCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBquIcBSIeuEdixWlN9JvbacToFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmRhNjY3YTYtMTA0My0z MTc0LTg3N2YtOTNjNjViMzJiNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5MBox0eufn0zWerH7P1OAxhfYKKJ93NcOsLeDH/l/GdkgCVo6b8Qbt 0sSKnnKbFG1XAg9AWrNrB0zHqnlCPf9xyTcyj4CDIge08D0Qfcd78EOSIY/UubUn bZ4ME90yxoCdZfrBM4dPFGcuoGP9yYjGsW5/0rez6kASl0hIOYjKuHSmBB0gZt28 1D5qmu67jZThLVg4O3mYDGdbcqm0Azcw3dfvkSQbvexdDmSKl16sDUR6lJNpgeJn JUbrA0pU+E2NZxEFb0LC4/YCnxSeOiVSNAXCLWPrY3ZHDjDpRt8lsnOlgyOCq87v Z+IfiRJmsGbkjCLi2sEnKjNKlJLSwag= -----END CERTIFICATE-----Generated at Tue Jun 3 06:21:33 2025 by rpki-client